$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e820c2de-4153-3772-8779-b9ed95316688.roa File: e820c2de-4153-3772-8779-b9ed95316688.roa (raw, json) Hash identifier: ju2qQdM9ZCrMHPjMzNfgg2gtr+SpQnS69GbJ3BW0mpY= Subject key identifier: 07:61:7F:AD:3D:71:D6:46:45:5D:0F:56:22:6E:A6:EF:1B:4F:3D:2F Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F432858491ED6ECF4CBC2EA21315C7180 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e820c2de-4153-3772-8779-b9ed95316688.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16839 IP address blocks: 199.91.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:ec:f4:cb:c2:ea:21:31:5c:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=bd19b2a0-5029-4f15-89e0-3697e42097d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:09:cd:9d:48:48:36:d3:c4:2f:18:cc:93:d9: cb:10:f1:b6:ff:84:d7:cb:f2:ec:45:d4:eb:52:c4: 89:12:90:02:bd:71:d6:6e:1e:5d:9c:92:43:f2:99: d7:77:10:51:74:21:61:7b:0a:da:f3:06:f6:18:d2: 5e:56:9b:9c:65:37:e9:24:2f:f0:0f:66:88:c4:52: 4d:73:ca:0a:dc:59:24:5f:d5:11:0f:8b:63:04:cb: 0b:be:95:52:74:25:2f:90:ca:06:cc:50:24:1b:94: a7:cb:37:b3:0c:c4:98:41:64:cd:ed:df:aa:7a:e2: c1:7b:04:5a:00:01:8f:ad:08:89:a6:bb:c0:73:2b: 80:a1:1c:68:a4:8b:c8:a0:49:64:ef:4f:1c:8b:78: d0:de:da:a1:0c:e1:71:7a:1b:fc:78:49:de:c2:f2: 98:6d:8a:41:80:ba:f8:b6:64:e7:8c:55:5b:7e:ba: 28:1e:27:cf:93:e8:25:c8:b3:4c:6c:d9:2c:c5:e7: 02:e8:ab:5c:0d:d7:aa:1c:a5:e5:6c:68:e0:83:47: a5:02:ea:91:e4:9f:44:11:48:c6:78:c3:ea:97:11: 6a:71:ee:52:3f:cc:2b:38:ce:5d:67:1c:55:29:f2: e0:42:f6:a2:bd:92:46:a5:1f:6d:05:10:85:eb:91: 57:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:61:7F:AD:3D:71:D6:46:45:5D:0F:56:22:6E:A6:EF:1B:4F:3D:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e820c2de-4153-3772-8779-b9ed95316688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:35:62:2e:71:36:94:96:88:2a:15:2f:70:f0:f3:89:e2:e1: b6:35:52:54:1a:df:f6:ab:e3:7e:ee:c5:03:48:4c:b7:44:6b: bd:35:d2:05:e7:da:a7:42:71:03:11:55:b5:cc:47:00:51:a5: a1:65:e8:98:a2:31:8c:f0:91:fb:c7:40:aa:1f:8d:63:fb:a4: 4c:d3:a1:61:ef:b1:ff:96:71:d0:d7:d6:99:9a:ce:28:e2:11: dc:79:77:d8:6e:4d:79:74:07:49:ac:d9:46:5b:7a:bd:c1:98: 89:89:88:cc:76:b3:b3:d8:1b:a1:4c:47:cf:a0:ea:e2:9f:ba: 91:49:c0:6f:1c:d9:ab:8b:d8:c1:7c:0c:c2:64:e9:47:13:7a: 17:2b:c5:7a:87:16:90:1e:f7:53:28:85:30:1f:08:84:82:3a: b5:6b:51:38:d1:92:15:dd:98:c1:10:03:3b:bd:8a:64:22:e9: 8c:ae:2b:4a:81:1e:ce:3b:65:00:5e:4a:98:6f:b6:14:0a:69: 79:db:9e:d8:14:d3:8f:a1:19:22:00:ce:07:0e:3d:86:bc:7f: 02:ea:04:80:e4:ef:5f:69:b0:a5:3d:3f:f8:84:e2:9a:b5:b9: 66:78:91:9d:55:fd:ec:22:1f:04:ac:7c:cf:93:c4:8c:28:fd: 08:b9:34:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1uz0y8LqITFccYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk YmQxOWIyYTAtNTAyOS00ZjE1LTg5ZTAtMzY5N2U0MjA5N2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwnNnUhINtPELxjMk9nLEPG2/4TXy/LsRdTr UsSJEpACvXHWbh5dnJJD8pnXdxBRdCFhewra8wb2GNJeVpucZTfpJC/wD2aIxFJN c8oK3FkkX9URD4tjBMsLvpVSdCUvkMoGzFAkG5SnyzezDMSYQWTN7d+qeuLBewRa AAGPrQiJprvAcyuAoRxopIvIoElk708ci3jQ3tqhDOFxehv8eEnewvKYbYpBgLr4 tmTnjFVbfrooHifPk+glyLNMbNksxecC6KtcDdeqHKXlbGjgg0elAuqR5J9EEUjG eMPqlxFqce5SP8wrOM5dZxxVKfLgQvaivZJGpR9tBRCF65FXEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdhf609cdZGRV0PViJupu8bTz0vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZTgyMGMyZGUtNDE1My0z NzcyLTg3NzktYjllZDk1MzE2Njg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFk1Yi5xNpSWiCoVL3Dw84ni4bY1UlQa3/ar437uxQNITLdEa7010gXn 2qdCcQMRVbXMRwBRpaFl6JiiMYzwkfvHQKofjWP7pEzToWHvsf+WcdDX1pmaziji Edx5d9huTXl0B0ms2UZber3BmImJiMx2s7PYG6FMR8+g6uKfupFJwG8c2auL2MF8 DMJk6UcTehcrxXqHFpAe91MohTAfCISCOrVrUTjRkhXdmMEQAzu9imQi6YyuK0qB Hs47ZQBeSphvthQKaXnbntgU04+hGSIAzgcOPYa8fwLqBIDk719psKU9P/iE4pq1 uWZ4kZ1V/ewiHwSsfM+TxIwo/Qi5NOk= -----END CERTIFICATE-----Generated at Sun Apr 27 04:25:57 2025 by rpki-client